Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143634.roa
File:                     AS143634.roa (raw, json)
Hash identifier:          c8FYKadt4BeJWBdAMqk1Xfesd1WESrINGUCTkZKg/5c=
Subject key identifier:   B1:1A:2D:51:5C:AD:A0:B6:90:3D:FA:1F:DB:CD:50:E1:40:E6:48:FD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       33DB3B0B92A962016806BC92ADCAAED2D570E096
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143634.roa
Signing time:             Tue 26 May 2026 03:16:50 +0000
ROA not before:           Tue 26 May 2026 03:11:50 +0000
ROA not after:            Tue 25 May 2027 03:16:50 +0000
asID:                     143634
IP address blocks:        240a:a3d8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:db:3b:0b:92:a9:62:01:68:06:bc:92:ad:ca:ae:d2:d5:70:e0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:50 2026 GMT
            Not After : May 25 03:16:50 2027 GMT
        Subject: CN=B11A2D515CADA0B6903DFA1FDBCD50E140E648FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:e6:e1:6c:b3:d3:3d:3a:66:95:35:31:6e:
                    87:48:ad:85:9f:aa:0d:2d:6f:76:e8:b1:29:d7:95:
                    52:44:f7:db:52:ed:6e:00:07:6b:ca:49:c0:96:36:
                    db:da:e1:ee:34:d0:6f:9a:b0:74:e3:68:be:3f:b4:
                    32:17:ac:8f:9a:bd:58:fb:bb:1e:d7:8d:69:91:18:
                    64:95:ca:b4:6d:8d:91:9d:7a:b6:35:da:af:0f:12:
                    1b:e3:f9:7e:90:72:6d:a8:2b:34:5e:0a:d5:c3:ff:
                    68:43:cc:c5:30:4b:09:f7:43:c7:e5:a5:a5:69:64:
                    0c:16:cd:ff:51:30:6e:7f:06:2c:d7:c5:66:3f:b5:
                    bf:a9:08:6c:f9:e7:fa:f8:c7:a7:ba:ff:23:1f:ac:
                    ab:7c:22:2c:14:a0:37:31:5b:29:81:ee:df:27:6c:
                    b1:8f:dc:9a:18:f4:28:d2:c9:6b:26:a8:d3:fc:14:
                    6e:f1:ca:3c:40:2b:3a:df:16:96:78:fe:30:3b:b2:
                    84:2b:b3:d5:8b:68:f3:bd:d0:20:6f:09:e1:0f:0e:
                    25:3e:f0:f8:86:eb:7b:6a:ab:cf:0c:70:3e:6b:50:
                    93:56:18:8b:ca:b5:d7:ba:4c:23:0c:f5:ab:85:8f:
                    83:4a:b1:17:af:70:d2:29:f2:37:8b:46:ad:f2:99:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1A:2D:51:5C:AD:A0:B6:90:3D:FA:1F:DB:CD:50:E1:40:E6:48:FD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a3d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:82:31:43:4d:f3:a0:da:4d:04:14:d6:89:cf:d5:1d:4e:b0:
         a4:34:a4:ed:6e:d0:bf:5a:c1:96:3b:93:a7:81:40:73:60:33:
         40:98:04:4c:16:52:da:c3:6b:67:d9:2a:79:0b:a3:15:7b:42:
         a1:54:9d:c9:12:e4:56:82:b5:6c:6e:e5:64:bd:c3:8f:6f:73:
         8e:46:2a:65:23:54:bc:ae:4e:c2:4e:c0:a9:69:72:6a:0b:2a:
         b0:43:89:ee:7d:03:c3:f6:bb:f8:18:8d:78:9f:c1:9c:41:30:
         ec:25:33:3c:c1:52:8b:db:e4:16:df:16:32:c6:c4:8e:7b:82:
         47:fe:59:74:43:08:17:b8:a9:b0:a2:4a:a5:35:e3:6f:a5:15:
         9b:a9:bf:ce:e6:17:fa:e8:dd:a0:94:fc:75:ea:b5:8b:8e:de:
         0f:ad:64:4c:d1:d9:5f:83:78:0c:71:28:ea:29:50:12:ba:99:
         20:a1:f8:dd:6a:25:89:82:65:07:ca:59:13:ad:c5:5d:75:b3:
         12:e7:84:7c:e1:c6:48:40:29:26:a2:b9:94:8b:cf:81:20:d3:
         23:da:8e:f1:00:21:20:b3:61:fd:69:48:56:3b:d8:d8:04:7d:
         dd:a2:f8:1c:78:22:d4:7a:02:0f:51:07:d3:d0:56:b9:08:de:
         c7:d1:41:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----